Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/LDGT8NJEUICmRYXuZk4uxaHyFRA.roa
File: LDGT8NJEUICmRYXuZk4uxaHyFRA.roa (raw, json)
Hash identifier: ZjYRVKsv0maa5fZZMIm+DHU1WyTXFL7sMdxWm4lqIQ0=
Subject key identifier: 2C:31:93:F0:D2:44:50:80:A6:45:85:EE:66:4E:2E:C5:A1:F2:15:10
Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial: 0905
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/LDGT8NJEUICmRYXuZk4uxaHyFRA.roa
Signing time: Sun 07 Feb 2021 11:55:03 +0000
ROA not before: Sun 07 Feb 2021 11:55:03 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9676
IP address blocks: 210.62.176.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2309 (0x905)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Validity
Not Before: Feb 7 11:55:03 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2C3193F0D2445080A64585EE664E2EC5A1F21510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:0f:eb:ca:23:d7:f9:27:d2:37:e3:f3:af:
2c:5a:f8:5c:81:8c:0c:81:c1:16:1f:fa:01:08:78:
38:66:07:1f:75:7a:37:8d:1f:a9:33:ed:e6:e5:d9:
44:b6:b8:a8:e5:5d:cd:bc:5c:fe:4f:7e:08:d6:ec:
bf:52:db:1c:99:83:9f:34:24:f4:e6:c6:ff:62:67:
06:95:c3:28:da:32:8d:53:1a:05:c0:ef:73:67:59:
27:a4:8a:13:48:b4:35:c3:df:e0:e9:50:57:2a:be:
bf:8b:d5:eb:e2:06:4e:27:94:85:5c:fe:54:a1:cc:
86:27:67:ef:ef:87:cb:c5:8c:3b:68:5e:60:9f:10:
37:0e:03:c1:60:e9:25:3a:26:ad:4c:e3:c6:c2:9c:
28:aa:b8:e2:7a:e4:93:13:4d:2c:e4:40:ea:52:9f:
35:7c:9f:d9:e1:23:f4:64:10:10:01:38:b9:8e:80:
df:53:6a:a5:1e:f3:37:68:13:fa:0a:2a:ac:a2:4b:
2d:17:3a:30:a5:bf:de:bb:4c:a2:b3:1c:e4:0a:b2:
d6:36:48:80:b1:27:78:33:f3:a3:77:ff:a8:01:05:
93:32:3e:bd:76:05:3e:79:fd:f3:85:75:96:ce:69:
1b:86:43:fc:b1:f9:9e:4d:48:00:91:27:98:a8:46:
30:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:31:93:F0:D2:44:50:80:A6:45:85:EE:66:4E:2E:C5:A1:F2:15:10
X509v3 Authority Key Identifier:
keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/LDGT8NJEUICmRYXuZk4uxaHyFRA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.176.0/20
Signature Algorithm: sha256WithRSAEncryption
c4:c5:7e:da:58:09:55:42:b9:07:ca:80:ef:dd:fa:4a:58:b7:
69:c3:16:6a:bc:64:41:66:6e:f9:91:a4:c8:5b:00:a2:79:e1:
71:c5:cb:74:60:b0:75:7e:87:3e:bd:14:e8:94:03:7b:94:c7:
df:8a:9c:a0:a4:a6:9a:1d:0b:c7:2c:4c:41:9e:12:65:b1:88:
d0:16:d2:d3:e3:45:f9:cf:9f:fb:64:99:74:57:9d:9d:dd:ef:
76:26:a6:49:4a:39:94:42:94:04:b0:ef:96:56:23:1b:3e:e4:
42:33:3a:5d:37:50:42:53:49:a2:9b:2f:23:4b:16:33:c3:9c:
48:85:13:3b:1d:f5:91:e6:1a:d7:27:3f:b9:90:d6:21:24:cf:
b2:70:59:47:a6:ca:a1:1c:e5:76:1d:97:ef:bf:fd:63:54:db:
9a:be:a3:aa:0d:a7:b3:ef:19:bc:f6:f5:e4:03:fa:c6:75:e5:
ad:ce:8a:ae:2a:69:59:08:84:5a:16:62:fa:e0:7e:93:68:60:
c7:fd:d7:f6:d3:4f:6d:58:7b:5c:c2:b0:dc:2f:48:a2:6e:42:
a2:f8:3e:ba:7c:bf:a9:22:3f:30:ab:73:2e:ab:cb:eb:f0:95:
d7:f9:1a:c7:ef:63:05:d9:63:d7:99:96:fc:5b:d7:6a:b4:de:
45:13:37:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:04 2023 by rpki-client on console-ams.rpki-client.org